Bastion · Vulnerability Disclosure

Bastion Vulnerability Disclosure

Vulnerability disclosure

Bastion publishes a vulnerability disclosure policy for reporting security issues. A dedicated security contact is published.

CompanyStablecoinsPaymentsWalletsCustodyWeb3ComplianceCrypto InfrastructureFinancial ServicesOn/Off-Ramps
Program:

Disclosure Policy

Security Contact

Contact
mailto:security@bastion.com

Source

Vulnerability Disclosure

bastion-vulnerability-disclosure.yml Raw ↑ 
generated: '2026-07-18'
method: probed
probe: true
source: DNS CAA record for bastion.com
contact:
- mailto:security@bastion.com
policy: []
evidence:
- source: 'CAA bastion.com: 0 iodef "mailto:security@bastion.com"'
  kind: security-contact
  keywords:
  - iodef
  - security@bastion.com
notes: >-
  No published /.well-known/security.txt (404 on bastion.com, 401 on
  api.prod.bastion.com) and no public responsible-disclosure page were found
  (docs are password-gated). The only machine-readable security contact located
  is the CAA `iodef` incident-reporting address security@bastion.com.